VMware Aria Operations Networks at Risk from Remote Attacks
Aug 30, 2023THNVulnerability / Network Security VMware has released software updates to correct two security vulnerabilities in Aria Operations for Networks that could be potentially…
Category: TheHackerNews
FBI Dismantles QakBot Malware, Frees 700,000 Computers, Seizes $8.6 Million
A coordinated law enforcement effort codenamed Operation Duck Hunt has felled QakBot, a notorious Windows malware family that’s estimated to have compromised over 700,000 computers…
DarkGate Malware Activity Spikes as Developer Rents Out Malware to Affiliates
Aug 29, 2023The Hacker NewsMalware / Cyber Threat A new malspam campaign has been observed deploying an off-the-shelf malware called DarkGate. “The current spike in…
Chinese Hacking Group Exploits Barracuda Zero-Day to Target Government, Military, and Telecom
A suspected Chinese-nexus hacking group exploited a recently disclosed zero-day flaw in Barracuda Networks Email Security Gateway (ESG) appliances to breach government, military, defense and…
Survey Provides Takeaways for Security Pros to Operationalize their Remediation Life Cycle
Aug 29, 2023The Hacker NewsRemedial Operations Ask any security professional and they’ll tell you that remediating risks from various siloed security scanning tools requires a…
Ransomware Hackers Exploiting Critical Vulnerability
Aug 29, 2023The Hacker NewsVulnerability / Network Security Unpatched Citrix NetScaler systems exposed to the internet are being targeted by unknown threat actors in what’s…
Microsoft Sounds Alarm on AiTM Attacks
Aug 29, 2023THNOnline Security / Cyber Threat Microsoft is warning of an increase in adversary-in-the-middle (AiTM) phishing techniques, which are being propagated as part of…
Experts Uncover How Cybercriminals Could Exploit Microsoft Entra ID for Elevated Privilege
Aug 28, 2023THNVulnerability / Active Directory Cybersecurity researchers have discovered a case of privilege escalation associated with a Microsoft Entra ID (formerly Azure Active Directory)…
Malicious Rust Libraries Caught Transmitting OS Info to Telegram Channel
Aug 28, 2023THNSupply Chain / Software Security In yet another sign that developers continue to be targets of software supply chain attacks, a number of…
Cyberattacks Targeting E-commerce Applications
Cyber attacks on e-commerce applications are a common trend in 2023 as e-commerce businesses become more omnichannel, they build and deploy increasingly more API interfaces,…
Now Targets IoT Devices with Enhanced Capabilities
Aug 28, 2023THNInternet of Things / Malware An updated version of a botnet malware called KmsdBot is now targeting Internet of Things (IoT) devices, simultaneously…
LockBit 3.0 Ransomware Builder Leak Gives Rise to Hundreds of New Variants
The leak of the LockBit 3.0 ransomware builder last year has led to threat actors abusing the tool to spawn new variants. Russian cybersecurity company…